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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114, including tfie fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1 .1 14, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 4/9/07 
has been entered. 

2. Claims 1-14 are pending. 

Response to Arguments 

3. Applicant's arguments filed 4/9/07 have been fully considered but they are not 
persuasive. 

4. In response to applicant's argument that there is no suggestion to combine the 
references, the examiner recognizes that obviousness can only be established by 
combining or modifying the teachings of the prior art to produce the claimed invention 
where there is some teaching, suggestion, or motivation to do so found either in the 
references themselves or in the knowledge generally available to one of ordinary skill in 
the art. See In re Fine, 837 F.2d 1071, 5 USPQ2d 1596 (Fed. Cir. 1988)and In re 
Jones. 958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). In this case, applicant 
suggests Challener teaches the advantages of performing an operation with no power 
and the selection between BIOS programs taught by Lin requires power to be on. 
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However, the Challener reference is used to teach the limitation of "byte-adding a user 
password and a product serial number", (col. 8, lines 33-37; col. 6, lines 13-17; and fig. 
5, #607). In response to applicant's argument that there is no motivation to combine the 
Challener and Lin references because they are at odds with each other, a recitation of 
the intended use of the claimed invention must result in a structural difference between 
the claimed invention and the prior art in order to patentably distinguish the claimed 
invention from the prior art. If the prior art structure is capable of performing the 
intended use, then it meets the claim. 

5. Applicant argues (page 6, P) that Challener "does not check for a default value, 
but instead adds automatically without the checking operation." However, "checking for 
a default value" is not in the claim language. Therefore, in response to applicant's 
argument that the references fail to show certain features of applicant's invention, it is 
noted that the features upon which applicant relies (i.e., checking for a default value) 
are not recited in the rejected claim(s). Although the claims are interpreted in light of 
the specification, limitations from the specification are not read into the claims. See In 
re Van Geuns, 988 F.2d 1 181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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7. Claims 1. 5-7, 11 and 13 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Challener et al., USPN 6,748,544 and further in view of Lin, USPN 
6,892,323. 

Regarding claim 1, Lin discloses a method of improving BIOS (Basic Input Output 
System) security of a computer system (col.1, lines 13-17) and storing a check sum 
value (col. 6, lines 20-23). Lin lacks or does not expressly disclose byte-adding a user 
password and a product serial number. However, Challener discloses byte-adding a 
user password and a product serial number (col. 8, lines 33-37 & col. 6, lines 13-17 and 
fig. 5, #607). It would have been obvious to one of ordinary skill in the art at the time 
the invention was made to modify the device of Lin with the device of Challener to store 
a checksum value calculated by adding a user password and serial number in order to 
secure and strengthen the password in the BIOS using a serial number as derived 
secret as taught by Challener, (col. 8, lines 35-37). Lin further discloses storing an 
added check sum value that is calculated by byte-adding the user password and the 
product serial number in a memory when the product serial number is not a default 
value in manufacturing (col. 8, lines 33-37 & col. 6, lines 13-17 and fig. 5, #607). 
comparing the stored check sum value with a check sum value calculated by byte- 
adding an inputted password and the product serial number of the BIOS ROM (col. 6, 
lines 20-23); and enabling writing to the BIOS ROM when the stored check sum value 
and the calculated check sum value are equal (col. 6, lines 22-28 and fig. 3, #206). 
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Regarding claim 5, Lin further discloses comprising: setting up a memory-mapped 
input/output region assigned as a BIOS writing protection region of a chipset having a 
GPIO (General Purpose Input Output) function as an input/output trap region and 
enabling an input/output trap (col. 2, lines 17- 26); allowing an event disabling a BIOS 
writing protection during operation of the computer system to occur (fig. 3, #202); setting 
up the input/output trap as disabled (col. 6, lines 5-20); determining the product serial 
number (Challener, col. 6, lines 13-17) of the BIOS ROM (col. 6, lines 20-23); allowing a 
user to input the inputted password when the product serial number is not a default 
value in manufacturing and calculating a check sum value by byte-adding the inputted 
password and the product serial number (Challener col. 8, lines 33-37 & col. 6, lines 13- 
17 and fig. 5. #607). 

Regarding claim 6, Lin further discloses comprising: enabling the input/output trap after 
enabling writing to the BIOS ROM (fig. 3, #202 and #206). 

Regarding claims 7 and 1 1 , Lin lacks or does not expressly disclose displaying an error 
message. However, Challener discloses displaying an error message when the product 
serial number is a default value in manufacturing, or when the check sum values (Lin, 
col. 6, lines 20-23) are not equal (fig. 4, #517). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the device of Lin 
with the device of Challener to display an error message when the checksums do not 
match in order to notify the user the access in invalid, as taught by Challener (fig. 4, 
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Regarding claim 13, Lin discloses a machine-readable medium that provides 
instructions, which, when executed by a machine, cause the machine to perform 
operations of improving BIOS (Basic Input Output System) security of a computer 
system (col.1, lines 13-17). Lin lacks or does not expressly disclose byte-adding a user 
password and a product serial number. However, Challener discloses byte-adding a 
user password and a product serial number (col. 8, lines 33-37 & col. 6, lines 13-17 and 
fig. 5, #607). It would have been obvious to one of ordinary skill in the art at the time 
the invention was made to modify the device of Lin with the device of Challener to store 
a checksum value calculated by adding a user password and serial number in order to 
secure and strengthen the password in the BIOS using a serial number as derived 
secret as taught by Challener, (col. 8, lines 35-37). Lin further discloses comparing the 
stored check sum value with a check sum value calculated by byte-adding an inputted 
password and the product serial number of the BIOS ROM (col. 6, lines 20-23); and 
enabling writing to the BIOS ROM when the stored check sum value and the calculated 
check sum value are equal (col. 6, lines 22-28 and fig. 3, #206). 

8. Claims 2-4 are rejected under 35 U.S.C. 103(a) as being unpatentable over Lin in 
view of Challener as applied to claim 1 above, and further in view of Cromer et al, US 
Patent Application Publication 2002/0120845. 
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Regarding claim 2, Lin in view of Challener discloses the method of improving BIOS 
security according to claim 1 . Lin lacks or does not expressly disclose determining if the 
user password is set up on a POST. However, Cromer discloses wherein the storing 
the check sum value comprises: determining if the user password is set up on a POST 
(Power On Self Test) (1I[0020-0021]). It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify the device of Lin in view of 
Challener with the device of Cromer to determine of the paS|Sword is set up in POST in 
order to authenticate the requester of the BIOS update by retrieving the current 
administrator password as taught by Cromer (1|[0021]). Lin further discloses 
determining the product serial number (Challener, col. 6, lines 16-17), of the BIOS ROM 
(col. 5, lines 55-57), in a case that the user password is set up (Challener, fig. 4, #503). 

Regarding claim 3, Lin further discloses comprising: setting up a memory-mapped 
input/output region assigned as a BIOS writing protection region of a chipset having a 
GPIO (General Purpose Input Output) function as an input/output trap region and 
enabling an input/output trap (col. 2, lines 18-27)-. 

Regarding claim 4, Lin lacks or does not expressly disclose storing the checksum in 
RAM or NVRAM. However, Challener further discloses wherein the storing the added 
check sum value (Lin, col. 6. line 20-23) in the memory comprises: storing the added 
check sum value in a CMOS RAM or a PNP NVRAM (col. 6, lines 12-15). It would have 
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been obvious to one of ordinary skill in the art at the time the invention was made to 
modify the device of Lin with the device of Challener to store the checksum in NVRAM 
in order to retain the stored checksum, as taught by Challener (col. 6, lines 12-15). 

9. Claims 8-12 are rejected under 35 U.S.C. 103(a) as being unpatentable over Lin 
in view of Challener as applied to claim 5 above, and further in view of Freeman et al., 
US Publication No. 2004/003265. 

Regarding claims 8-10, Lin further discloses wherein the allowing of the event disabling 
of the BIOS writing protection to occur comprises allowing the input/output trap to occur 
(fig. 3, #202 and #206). Lin lacks or does not expressly disclose allowing writing to the 
BIOS ROM by a PNP NVRAM (Plug And Play Non-Volatile Random Access Memory) 
manager to occur. However, Freeman discloses allowing writing to the BIOS ROM by a 
PNP NVRAM (Plug And Play Non-Volatile Random Access Memory) manager to occur 
(11[0009]). It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the device of Lin with the device of Freeman to utilize a 
PNP NVRAM in order to write to the BIO ROM as taught by Freeman (1I[0009]). 

Regarding claim 12 Lin lacks or does not expressly disclose displaying an error 
message. However Challener discloses displaying an error message when the product 
serial number is a default value in manufacturing, or when the check sum values (Lin, 
col. 6, lines 20-23) are not equal (fig. 4, #517). It would have been obvious to one of 
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ordinary skill in the art at the time the invention was made to modify the device of Lin 
with the device of Challener to display an error message when the checksums do not 
match in order to notify the user the access In invalid, as taught by Challener (fig. 4, 
#517). 

10. Claim 14 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Freeman, U.S. Patent Application Publication Number 2004/0003265, in view of 
Challener and in further view of Lin. 

Regarding claim 14, Freeman discloses method of improving BIOS (Basic Input Output 
System) security of a computer system (abstract), comprising: receiving an inputted 
password (fig. 2, #203); and enabling writing to a BIOS ROM. Freeman lacks 
determining if a stored and calculated check sum values based on inputted password 
are equal. However, Lin discloses having a security maintenance structure, when a 
stored check sum value and a calculated check sum value based upon the inputted 
password (Freeman, fig. 2, #204 and #210) are equal (col. 6, lines 53-57). 
It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to modify the device of Freeman with the device of Lin to compare a stored 
and calculated check sum value in order to further verify that writing to the BIOS is 
secure as taught by Lin (col. 6, lines 20-23). Freeman further discloses wherein the 
security maintenance structure of the BIOS ROM is not changed (fig. 2, #209). 
Freeman lacks or does not expressly disclose byte-adding a user password and a 
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product serial number. However, Challener discloses byte-adding a user password and 
a product serial number (col. 8, lines 33-37 & col. 6, lines 13-17 and fig. 5, #607). It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the device of Freeman with the device of Challener to store a checksum 
value calculated by adding a user password and serial number in order to secure and 
strengthen the password in the BIOS using a serial number as derived secret as taught 
by Challener, (col. 8, lines 35-37). 

Conclusion 

1 1 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aubrey H. Wyszynski whose telephone number is 
(571)272-8155. The examiner can normally be reached on Monday - Thursday, and 
alternate Friday's. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on 571-272-381 1. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://palr-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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